From f713aa90ef6c6f2733380491c0f6d7f1b48522b7 Mon Sep 17 00:00:00 2001 From: tegwick Date: Tue, 6 Oct 2026 17:02:15 +0200 Subject: [PATCH] Record approved deployment, backup and personal login blocker Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a10e2d-a5ef-7e92-b03d-b1694e915680 --- ...P-0015-coulomb-personal-content-release.md | 36 ++++++++++++++++++- 1 file changed, 35 insertions(+), 1 deletion(-) diff --git a/workplans/RAPPS-WP-0015-coulomb-personal-content-release.md b/workplans/RAPPS-WP-0015-coulomb-personal-content-release.md index 69032ed..8191787 100644 --- a/workplans/RAPPS-WP-0015-coulomb-personal-content-release.md +++ b/workplans/RAPPS-WP-0015-coulomb-personal-content-release.md @@ -53,7 +53,7 @@ that coulomb-social is not currently ArgoCD-managed. Publish the review branch. ```task id: RAPPS-WP-0015-T03 -status: wait +status: done priority: high state_hub_task_id: "2ce05439-70dc-53cf-b704-5118687857cb" ``` @@ -94,3 +94,37 @@ confirms the public coulomb-social client is absent. CSOC-WP-0008-T11 prepares its restoration and shared KeyCape restart; no live change has been made. Existing completed apps-pg daily backup is not a paired application restore. T03/T04 remain waiting for exact live approval and personal acceptance. + +## Approved deployment receipt — 2026-10-06 + +Founder approved explicit proposal; decision 8bbce691-a787-4140-9cd4-df06e8635a27, +ADMINISTER @ realm:kubernetes/railiance01, activation=APPROVED. +Fresh apps-pg Backup csoc-preupgrade-20261006145351 completed 14:54:31Z before +app upgrade. Chart changes pushed to main at3f5a909. Helm atomic upgrade from +railiance01 succeeded: revision10, chart0.2.0, pinned digest above. App1/1 ready, +2Gi PVC Bound, UID/GID10001 write succeeds, zero pending migrations. Dedicated +synthetic content marker survived a fresh pod restart and was removed afterward. +Public health/landing/clipboard asset200; login302 correct issuer/client/PKCE. + +Missing public OIDC client restored and KeyCape restart succeeded under same go; +authorization hands off to Authelia. Interactive tegwick sign-in remains pending +user confirmation. T03 done; T04 wait for interactive/product acceptance and +paired recovery. No productive import or apex cutover. Application receipt: +coulomb-social/docs/release/personal-account-deployed-2026-10-06.md. + +## User sign-in result — 2026-10-06 + +The user reaches auth.coulomb.social but tegwick is rejected as wrong username +or password. Read-only directory query through the existing provisioner confirms +tegwick is present. Live Authelia username attribute is uid; its lookup supports +uid or mail. Contained recent-log inspection records a tegwick LDAP invalid- +credentials failure, without backend connection error or regulation-ban evidence +in that entry. This does not establish why the entered credential is rejected. + +The app and client restoration are deployed, but personal sign-in is not accepted. +CSOC-WP-0008-T11 remains wait for human credential confirmation/recovery and a +successful fresh sign-in. The user was asked whether the same password works on +another service. No password was requested/read/exported or reset. Authelia's +current notifier is filesystem rather than SMTP: do not promise emailed recovery +or expose reset tokens from notification files. Any credential reset must use +the owning attended recovery/setup lane under a separate exact approved change.